Help Sitemap Home Skip Navigation Contact Us Disability Statement

 
 
Friday, 3rd September 2010

1066 Housing Association security blunder

Click on thumbnail to view image
Click on thumbnail to view image
Click on thumbnail to view image
Click on thumbnail to view image
Click on thumbnail to view image

Published Date:
18 June 2008

A contractor working for 1066 Housing Association made a major blunder this week when it sent out personal details of all tenants to a RESIDENT.

Shocked Graham Morgan checked his inbox and found three confidential emails from payment company Allpay.net on behalf of 1066 Housing, containing spreadsheets with the personal information of up to 30,000 tenants.

Graham, 55, said: "I called 1066 because they'd made a mistake and sent me a statement telling me I was in arrears.

"At the bottom of the statement there was an advert saying I could now pay my bill in Woolworths through Allpay, and I recognised it.

"While I was on the phone I said I've had emails from Allpay. I didn't open the attachments, but I told the guy what they said, and he said, do what you want with it.

"Then a woman called me back and told me to phone Allpay. I forwarded the emails to Allpay and a woman called Claire Hughes replied and said please delete all the emails received and the files attached."

The email also stated that Allpay would be investigating why Mr Morgan was on the mailing list - which should only have contained addresses of 1066 Housing staff.

The writer, from Churchill Avenue, has deleted the emails and files. He said: "I'm glad I don't pay my rent by Allpay. There might be information in there that I wouldn't want people to know.

"1066 have 27,000 tenants. They should take more care with information like this."

1066 performance director Robin Deane said: "This is a very serious breach of confidentiality.

"We discovered this week that a tenant had received two emails in error from Allpay.net, which handle payments made through our rent cards. The tenant had registered a website domain name which is similar to 1066's, and we believe this is how the error occurred.

"The emails included names and addresses of residents who had made rent payments through Allpay.net in a two-week period in February/March, together amounts that had been paid.

"I can reassure residents that they did not include bank account details or other personal information.

"We have launched an investigation with Allpay to find out how this error occurred and they are putting additional security measures in place to prevent a similar incident happening again."

A spokesman for Allpay.net said: "We are currently working with 1066 to understand how this incident has occurred. Allpay.net takes information security extremely seriously and is subsequently conducting a full investigation."

Any 1066 tenants who have concerns are asked to call 01424 728000.

Page 1 of 1

  • Last Updated: 18 June 2008 5:07 PM
  • Source: n/a
  • Location: Hastings
 
Prev
1
Next
1

bart simpson,

21/06/2008 08:59:17
Another New Labour success of incompetant bureaucracy!
2

cbrxxrider,

ore 22/06/2008 00:33:11
This is typical nowadays why can`t they encrypt this kind of information? This kind of data should never be sent by email.
3

Churchill United,

Hastings 22/06/2008 12:35:49
It seems odd that 1066 Housing Association only start an investigation when they get caught. If they are telling the truth and these details went astray in the internet post, it is fair to assume that 1066 housing were expecting to receive them and did`nt. How many times have they had to request data such as this to be resent? and not investigated where the first attempts went.
Also why have an investigation? Sending data by email is notoriously unsafe. They should have an investigation into why they did not decide to safeguard our info when they originally set up the process with Allpay.
4

concerned tennant,

Hastings 22/06/2008 17:57:39
I'm sorry to say I am not surprised by this article the slap dash way housing associations and other companies that hold all our details just seem to have no thought to our privacy and allow them to be copied for any Tom Dick And Graemes to see how ordinary people can accidently have these details is beyond me .Well done for exposing this error on 1066 part
Prev
1
Next

 

Comment on this Story

 

In order to post comments you must Register or Sign In

 
 
 
 


Sister Newspapers:
Press Complaints Commission

This website and its associated newspaper adheres to the Press Complaints Commission’s Code of Practice. If you have a complaint about editorial content which relates to inaccuracy or intrusion, then contact the Editor by clicking here.

If you remain dissatisfied with the response provided then you can contact the PCC by clicking here.